Security
Security and compliance.
What Octyo does to protect your data and keep your documents compliant. Only what is in place today, with no empty promises.
Your data
Data hosted in the European Union
Octyo runs on Google Cloud and Firebase. The database is replicated in Belgium and the Netherlands, the server and uploaded files are in Belgium, and backups stay in the European Union: restore to any minute of the last 7 days, and a copy of the whole database every week.
No ads, no resale
No data is sold, rented or used for advertising. No advertising cookies, no audience tracking.
A trace of every action
An audit log records who did what and when in your workspace, readable only by Octyo’s authorised team, with no passwords or health data. Technical logs are kept for 30 days, and no error message contains personal data.
Your rights
Access, correction, deletion, portability: the privacy policy explains how to exercise them.
Access
Everyone has their own account and access
The owner can use every app in the subscription. Each employee joins the business by invitation, with their own account, on their phone or computer. For each app, you choose a level (read, user, manager, admin), then the allowed actions one by one, with switches already set sensibly.
Checked on the server
Permissions are checked in the database and on the server, never in the browser: editing the page unlocks nothing. The Octyo team only enters an account with the approval given in Octyo, for a limited time, and every entry is recorded.
Shared stations, no borrowed accounts
The till tablet or shared computer runs on an internal business account. Each employee identifies on it with their code or by scanning a QR code with their phone: every sale carries their name. The device never reads the team list, and when you sign out Octyo clears what it kept there to work.
Claude, with your permissions
The Claude connector never opens more than the person can see and do in Octyo.
Documents
Numbering with no gaps
Invoices, credit notes and receipts get their number from the server: no gaps, no duplicates, even with a team.
Unalterable once issued
An issued invoice can’t be edited: you correct it with a credit note. Compliant invoices for France, its overseas regions and Quebec; Factur-X PDFs for France.
A till that keeps a trail
Every receipt is numbered, chained and signed by the server, closed every day, month and year. The till keeps selling offline.
Archived, never erased
What’s no longer needed is archived, and the history keeps track of who did what. A posted journal entry never changes: it is reversed.
Signatures and payments
Simple electronic signature
Code sent by email, document fingerprint and proof certificate (eIDAS Regulation, art. 25; French Civil Code, art. 1366 and 1367).
Verifiable by anyone
The “Verify a signed document” page checks a PDF signed on Octyo: the file stays on your device, nothing is uploaded.
Payments through Stripe
Payments go through Stripe: Octyo never sees or stores a card number.
AI that never touches money
No Claude connector tool moves money: refunds and cancellations happen in Octyo.
A security question?
Write to support@octyo.com. The privacy policy and legal notice give the details.
